CVE-2018-17463VulnerabilityPublished 06/08/2022Updated 10/24/2026

CVE-2018-17463: Google Chromium V8 Remote Code Execution Vulnerability

Affects Google Chromium V8Source CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 06/08/2022
KEV deadline: 06/22/2022
EPSS: 84.6% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2018-17463 (opens in a new tab)

Description

CVE-2018-17463 is a high-severity remote code execution vulnerability in the Google Chromium V8 JavaScript engine. It allows a remote attacker to execute code within the sandbox environment by delivering a crafted HTML page. This vulnerability affects multiple web browsers that use the Chromium engine, such as Google Chrome, Microsoft Edge, and Opera. Exploits have been observed in the wild. No specific affected versions or patch information is provided in the available data.

Summary

The vulnerability identified as CVE-2018-17463 exists in the Google Chromium V8 engine, enabling remote code execution inside the sandbox through a specially crafted HTML page. This flaw impacts various Chromium-based browsers. The vulnerability has been exploited in the wild, indicating active threat usage. However, no detailed technical specifics or patch status are included in the provided information.

Impact

Successful exploitation allows remote attackers to execute arbitrary code within the sandboxed environment of affected browsers. This can lead to compromise of browser security boundaries and potentially enable further attacks on the host system or user data. Multiple popular browsers based on Chromium are affected, increasing the potential attack surface.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users and administrators should monitor official Google Chromium security advisories for updates and apply patches promptly once available. Until then, exercising caution with untrusted web content is advised.

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 12:04:31 UTC

References

Related threats